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Amendments to the Specification : 

Please replace the paragraph beginning at page 15, line 15 (Paragraph 0085 of Patent 
Application Publication No. 2007/0106892) with the following rewritten paragraph: 

Whenever a transaction is initiated^ a PRP is provided by the Chip Card as the transaction 
specific identifier or one-time-only card number. Except for this identifier^ the Chip Card will 
leave NO additional identifiers unless voluntary voluntarily approved by the Client as part of the 
transaction. 

Please replace the paragraph begirming at page 15, line 20 (paragraph 0086 of Patent 
Application Publication No. 2007/0106892) with the following rewritten paragraph: 

In case of PRPs provided by a RFID-tag as an RFID pseudonym from a list of 
pseudonyms (such as a ticke t, etc. ), [[etc.]] the [[PRP]] PRPs store pre-encrypted information 
that^ upon forwarding to the Service Provider^ authorise authorize release of data to the provider 
of services. 

Please replace paragraph beginning at page 31, line 23 (paragraph 0174 of Patent 
Application No. 2007/0106892) with the following rewritten paragraph: 

The preferred solution would be to incoiporate the chip card in a dedicated personal 
authentication device in communication with other devices using wireless protocols. This way 
the same chip card can be used to control all user devices using privacy device authentication to 
establish control with the specific devices. 

Please replace paragraph beginning at page 31, line 28 (paragraph 0175 of Patent 
Application Publication No. 2007/0106892) with the following rewritten paragraph: 

This can be split into two devices in the form of a Master Authentication Device 
(dedicated to handling basic keys and physical authentication across devices) device 
authenticated to a Master Communication Device (mobile phone, pda, portable, etc.) handling 
additional communication. 
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Please replace paragraph beginning at page 96, line 16 (paragraph 0521 of Patent 
Application Publication No. 2007/0106892) with the following rewritten paragraph: 

The core zero-knowledge authenticated request is not generated by the RPID reader 
itself, but by an actor using any device under his control, which is able to generate a request 
which is then forwarded to the RFID reader and communicated to the RFID tag. Upon proper 
authentication the TAG will respond in a similar [[manor]] manner to the RFID reader which 
returns the reply to the actor, who can then initiate the next step. This can be simply detecting the 
presence of the specific tag and [[do]] doing nothing or instructing the Tag to do some operation 
such as revealing the ePC to a retailer. Normally we would however assume that the actor device 
itself will handle communication towards third parties and the tag itself only communicates with 
the actor device ensuring the ePC is NOT stored on the tag. 
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